ORGH.MGM.201 Information security management system

• Regulation (EU) 2025/20 found in: Ground Handling (GH) (2025/23 and 2025/20) (Nov 2025)

#### ORGH.MGM.201 Information security management system *Regulation (EU) 2025/20* The ground handling organisation shall establish, implement and maintain an information security management system in accordance with the Annex (Part-IS.D.OR) to [Commission Delegated Regulation (EU) 2022/1645](http://data.europa.eu/eli/reg_del/2022/1645/oj)[[21]](#_ftn21) to ensure the proper management of information security risks which may have an impact on aviation safety. *[point ORGH.MGM.201 applicable from 27 March 2031 — Regulation (EU) 2025/20]* --- [[21]](#_ftnref21) Commission Delegated Regulation (EU) 2022/1645 of 14 July 2022 laying down rules for the application of Regulation (EU) 2018/1139 of the European Parliament and of the Council, as regards requirements for the management of information security risks with a potential impact on aviation safety for organisations covered by Commission Regulations (EU) No 748/2012 and (EU) No 139/2014 and amending Commission Regulations (EU) No 748/2012 and (EU) No 139/2014 ([OJ L 248, 26.9.2022](https://eur-lex.europa.eu/legal-content/EN/AUTO/?uri=OJ:L:2022:248:TOC), p. 18, ELI: <http://data.europa.eu/eli/reg_del/2022/1645/oj>).